QUECWA FACT FILE · Original structured learning resource
Foundation: Why quantum changes the security conversation
OBA outcome — Explain: Explain why quantum-capable attacks threaten widely used public-key cryptography and why HNDL matters before Q-Day.
← Full pathwayWhy quantum changes the security conversation
The protection we rely on
Public-key cryptography helps establish secrets and authenticate systems. RSA and elliptic-curve techniques depend on mathematical problems that sufficiently capable fault-tolerant quantum computers could solve using Shor’s algorithm.
What changes—and what does not
This does not mean today's quantum computers routinely break real-world RSA or ECC. Symmetric cryptography such as AES has a different quantum threat profile and should not be confused with vulnerable public-key mechanisms.
Why action starts now
Harvest Now, Decrypt Later (HNDL) describes encrypted information being collected today for potential future decryption. The relevant decision is how long data must remain confidential, not merely the predicted date of a cryptographically relevant quantum computer.
The response
Post-quantum cryptography uses algorithms designed to resist known classical and quantum attacks on ordinary computers. Organisations should begin with visibility, risk assessment and a staged plan aligned to applicable ASD guidance.
Founder video: Why quantum changes the security conversation
This is a timed production outline, not a recorded video. The finished video will be no longer than five minutes.
- 0:00–0:50 — Introduce a secure website connection and the role of public-key cryptography.
- 0:50–1:50 — Explain RSA/ECC and Shor’s algorithm without advanced mathematics.
- 1:50–2:55 — Illustrate HNDL with records that must remain confidential for many years.
- 2:55–4:15 — Explain PQC and the first organisational questions.
- 4:15–4:40 — Ask the learner to explain the risk in their own words.
Three things worth remembering
- The protection we rely on: Public-key cryptography helps establish secrets and authenticate systems. RSA and elliptic-curve techniques depend on mathematical problems that
- What changes—and what does not: This does not mean today's quantum computers routinely break real-world RSA or ECC. Symmetric cryptography such as AES has a different quantum th
- Why action starts now: Harvest Now, Decrypt Later (HNDL) describes encrypted information being collected today for potential future decryption. The relevant decision is
Explain, don't guess
Show what you can do
Write a 120-word explanation to a nontechnical board member: what is HNDL, what is uncertain, and what should be assessed first?
Show evaluation criteria
A good response distinguishes present capture from future decryption, avoids claiming Q-Day has arrived, and identifies data confidentiality lifetime.
Self-assessment only. A score or completion here is not a professional certification.
Authoritative references: ASD / ACSC (including the ISM and PQC transition guidance) · NIST PQC project · FIPS 203 · FIPS 204 · FIPS 205. Check current versions and applicability before acting.
Source foundation: founder-authored educational course material, adapted and independently revised for QUECWA. Content is educational and subject to continuing technical review.